Security & Testing
testorax.com
Provides access to Testorax health, run listings, bug reports, and proof packets for QA and security testing.
ENDPOINT 1
https://testorax.com/mcp
Known tools 136
fetch_proof_packetFetch the agent-readable Proof Packet for a run (Agent Fix Loop).
Inferred read-onlyvalidate_assertionValidate and compile a closed-set assertion helper into runner-supported TestSteps.
Inferred read-onlycampaign_executeStage H: confirm a campaign preview and queue page-by-page execution.
Inferred read-onlycampaign_statusStage H: get full campaign execution status (campaign + page-runs + progress + proofSummary).
Inferred read-onlycampaign_run_progressStage H/E: get a compact live progress snapshot for either a preview job (prv_<22>) or a campaign (cmp_<22>).
Inferred read-onlycampaign_issuesStage I: read all issues + proof packets + AI fix prompts for a campaign.
Inferred read-onlyverify_fixCompare two arbitrary runs (original failure + verification rerun) and return a closed-set 12-status verdict envelope (fixed_verified | still_reproduces | partially_fixed | unable_to_verify | flaky | regression_reopened | selector_changed | route_missing | auth_blocked | environment_changed | proof_changed_but_not_verified | unknown).
Inferred read-onlyget_visual_layoutGet the Visual / Mobile Layout Intelligence v1 envelope for a run (contract 1.0.0).
Inferred read-onlyget_safe_test_dataGet the Safe Test Data Mode envelope for a run (contract 1.0.0).
Inferred read-onlyget_app_mapGet the App Intelligence Map / Proof Graph Dashboard v1 envelope for a run (contract 1.0.0).
Inferred read-onlyfix_check_statusStage J: read full Fix Check status + verdict + before/after comparison.
Inferred read-onlyfix_check_verdictStage J: shorthand for fetching ONLY the verdict + comparison + doNotClaim of a Fix Check.
Inferred read-onlysuggest_patch_batchesSuggest patch batches (groups of failing issues to fix together) by comparing baseline vs current run.
Inferred read-onlysummarize_run_changesCompact summary of what changed between baseline and current run.
Inferred read-onlydetect_proof_weakeningDetect whether the current run shrank proof coverage vs the baseline.
Inferred read-onlyget_validation_evidenceGet full validation runtime evidence for a run: every probe with classification, DOM signals, formSelector, targetUrl, note, capturedAt.
Inferred read-onlyget_auth_coverageGet the authenticated coverage runtime envelope for a run (contract 1.0.0).
Inferred read-onlyget_history_intelligenceGet aggregated Proof Memory across the caller's runs (last 30 days by default; max 90).
Inferred read-onlyget_compact_proofGet the Compact Proof Summary for a run — small (~1–3 KB) agent-first JSON with verdict, trustScore, failureType, failedStep, whatHappened/whatIsProven/whatIsNotProven, latestScreenshot pointer (if available), proofPacketUrl/exportUrl/runIntelligenceUrl, fixCheck recommendation, nextSafeAction, aiFixPromptCompact, doNotClaim.
Inferred read-onlyget_operational_depthGet the Operational Depth Layer v1 result for a run — universal classifier (not app-specific) that tells apart shallow public / login-wall / SPA-shell runs from runs that exercised authenticated operational surfaces.
Potential side effectsget_traversal_runtimeGet the Stateful Traversal Runtime substrate v1 result for a run — universal substrate (not app-specific) returning transition fingerprints, traversal memory (visitedStates / visitedRoutes / repeatedSelectors / noOpSelectors / modalBranches / authRedirects / deadEnds / branchDepth / branchBreadth), runtime novelty (uniqueTransitionRatio / repeatedTransitionRatio / noOpTransitionRatio / branchExpansionRatio / actionNoveltyScore / runtimeStagnationRisk), workflow continuity verdict (closed set: workflow_chains_detected / workflow_chains_partial / workflow_chains_blocked / workflow_dead_ends_present / no_workflow_signal — NOTE workflow_chains_verified is NEVER claimed by substrate), runtimeStagnationWarnings, doNotClaim.
Inferred read-onlyget_screenshot_recommendationGet just the screenshot-on-demand recommendation block for a run, without the rest of the compact proof.
Inferred read-onlyaudit_previewOne-flow audit plan: given a target URL, return what will be tested, what will not, blocked reasons, recommended mode (public_fast_scan / authenticated_smoke / full_crud_e2e / campaign_execution / blocked), the exact next CLI command, proof scopes expected, and Chrome parity recommendation.
Potential side effectsget_live_run_statusGet the live status + recent proof events for a run (Watch Test Live).
Inferred read-onlylist_login_memoryList the caller's Login Memory (saved authenticated session) profiles.
Inferred read-onlycreate_auth_profileCreate a Login Memory profile by driving a real browser login on the cloud-side Hetzner runner.
Potential side effectslaunch_readinessCompute a conservative launch-readiness verdict from caller-supplied evidence (compact proofs, audit preview/run, Chrome parity, cleanup result).
Inferred read-onlyclassify_evidenceClassify a normalized evidence record using the False-Positive Classifier (Hardening Batch 1).
Inferred read-onlylist_screenshotsList all screenshots stored for a run (raw PNGs + AB-2 marked annotations).
Inferred read-onlyget_screenshotGet a safe authenticated URL + caption for a specific screenshot by id.
Inferred read-onlystart_fix_checkSTARTS a Fix Check on a previously-failed run — creates a regression_check verify run that re-executes the original failing scenarios with the same-assertion lock.
Inferred read-onlyrun_summary_mdGet a markdown narrative summary of a run, optimized for LLM consumption.
Inferred read-onlyfailure_contextGet complete diagnostic context for a failed scenario: failed step, error, screenshot, DOM snapshot, console errors, network, blocked cookies.
Inferred read-onlyregressionsFind scenarios that regressed — were passing on the last N runs and just broke.
Inferred read-onlylist_actionsList every supported step action with required/optional fields and examples.
Inferred read-onlyget_run_statesGet the run state diagram: every state, valid transitions, and when you can inject scenarios.
Inferred read-onlyget_dashboardFetch account dashboard KPIs: pass rate, critical issues, spend, daily series, top failing scenarios.
Inferred read-onlyget_usageCustomer plan, calendar-month usage by mode, wallet balance, remaining allowance.
Inferred read-onlycheck_free_audit_eligibilityRead-only check whether (email, URL) is free-audit-eligible.
Potential side effectsstart_free_fast_bug_scanSTARTS the one-time FREE Fast Bug Scan (uses the trial credit).
Inferred read-onlylist_test_modesList the four Testorax test modes with their requirements, risk level, and whether agent config is needed.
Inferred read-onlylist_test_templatesList all Workflow + Deep CRUD templates the agent can use as scaffolds.
Inferred read-onlyvalidate_template_inputsPure shape check: does the agent have every required field for this template?
Inferred read-onlylist_scenario_templatesList all Scenario Template Library templates (41 ready-made scenarios covering auth, CRUD, search, pagination, forms, editor, commerce, communication, file, permissions, resilience, mobile, accessibility, multi-tenant, feature-flags, realtime, localization, data-export, data-import).
Inferred read-onlygenerate_scenario_from_templateGenerate a complete fillable scenario JSON from a template + caller-supplied variables.
Inferred read-onlystart_fast_bug_scanSTARTS a new Fast Bug Scan run on a deployed URL — opens the app in a real browser, clicks every safe visible control, reports breakages.
Inferred read-onlystart_fast_bug_huntSTARTS a Continuous Bug Hunt — crawls the URL and stops on the first high-confidence (severity=high, confidence>=0.8) issue.
Inferred read-onlystart_regression_checkSTARTS a Verify Fixes run — re-executes the failing interactions from a prior run, specific findings/issues, or all open issues for an app.
Inferred read-onlyprepare_workflow_testSTARTS a Workflow Test by submitting a multi-step user journey config (login → checkout, signup → confirm, create-project → invite-collaborator).
Potential side effectsstart_authenticated_smokeSTARTS an Authenticated Smoke Test — visits each provided route under a saved Login Memory profile and captures per-route classification (ok / blank_content / page_error / fetch_failed / auth_lost / timeout / navigation_error / console_error_only).
Inferred read-onlyget_run_chat_historyFetch the full chat history for a run — every question and answer, in order.
Inferred read-onlyget_latest_run_errorsMost recent critical/high/medium errors from a run, combining Live Click Audit findings AND normal scenario failures.
Inferred read-onlyget_bug_memory_matchesFor every finding in a run, return the matched bug_memory row (if any).
Inferred read-onlymark_finding_feedbackLabel a finding (confirmed_bug | fixed_verified | false_positive | expected_behavior | ignored | fixed_unverified).
Inferred read-onlylearn_from_runBulk: confirm Bug Memory rows for every already-labelled finding in this run.
Inferred read-onlyget_project_memoryRead .testorax/rules.md / live-click.md / ignore.md for a project (by hostname or orgId+appId).
Inferred read-onlyset_project_memoryWrite/update a .testorax/{rules,live-click,ignore}.md file for a project.
Potential side effectsget_open_issues_for_appFetch every open issue for an app, sorted by severity + recency.
Inferred read-onlyupdate_issue_statusMove an issue between statuses (open | in_progress | fixed | fixed_verified | ignored | false_positive | expected_behavior).
Inferred read-onlydiscover_configGenerate draft Workflow/CRUD/Campaign configs from existing evidence (report.json / proof packet / live scan / known routes).
Inferred read-onlyconfirm_configConfirm a draft config (workflow/crud/campaign) — does NOT execute.
Potential side effectspreview_authenticated_auditPreview a universal authenticated audit on a Testorax-owned target.
Inferred read-onlyexecute_authenticated_auditExecute a universal authenticated audit on a Testorax-owned target.
Potential side effectsCONNECT WITH APPROVAL
Client installation
Review this server and its permissions before adding it. Secret placeholders must be set locally.
Codex
~/.codex/config.toml
[mcp_servers.testorax-com]
url = "https://testorax.com/mcp"
enabled = true
Claude Code
.mcp.json
{
"mcpServers": {
"testorax-com": {
"type": "http",
"url": "https://testorax.com/mcp"
}
}
}
Claude Desktop
Settings → Connectors → Add custom connector
Name: testorax-com
Remote MCP URL: https://testorax.com/mcp
Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.
Cursor
.cursor/mcp.json
{
"mcpServers": {
"testorax-com": {
"url": "https://testorax.com/mcp"
}
}
}
Visual Studio Code
.vscode/mcp.json
Add to Visual Studio Code{
"servers": {
"testorax-com": {
"type": "http",
"url": "https://testorax.com/mcp"
}
}
}
Generic MCP
Client-specific MCP configuration
{
"name": "testorax-com",
"transport": "streamable-http",
"url": "https://testorax.com/mcp"
}
MCP Inspector
Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.
TRUST AND VERIFICATION EVIDENCE
Trust Data Available
BuiltWith Trust API v2 evidence for testorax.com was fetched 2026-08-21T14:59:39.590Z and is being refreshed.
testorax.com is assessed as Trusted: Domain has an established technology history spanning over a year.
Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.